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This listing of claims replaces all prior versions, and 
listings of claims in the instant application: 

Listing of Claims i 

1. (Currently amended) A system comprising: 
a security management system comprising: 

a network security feedback and control system 
wherein said network security feedback and control . 
system receives a plurality of normalized events and 
issues at least one normalized command in response to 
a predefined event in said plurality o£ normalized 
event bj_ 

a security management agent coupled to said security 
management system wherein said security mana gement agent 
collects normalized events generated by o ne or more 
managed products and forwards said normalised eve nts to 
said security management system, furth er wherein said 
security management agent receives normaliz ed commands 
from said security management system and forwar ds said 
normalized commands to at least one managed product; and 

at least one managed product coupled to said s ecurity 
management agent wherein said at least one m anaged product 
generates and transfers at least one normali zed event to 
said security management agent > 

2. (Original) The system of Claim 1 wherein said network 
security feedback and control system comprises: 

a feedback and control manager wherein said feedback 
and control manager processes said at least one normalized 
event and generates said at least one normalized command. 

3. (Original) The security management system of Claim 2 
wherein said feedback and control manager includes at least one 
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rules engine wherein said rules engine includes a. rule having a 
condition object that uses information from said at least one 
normalized event. 

4. (Original) The system of Claim 1 further comprising: 

a managed node coupled to said security management 
system. 

5. (Currently amended) The system of Claim 4 wherein 
said managed node further comprises; 

a said security management agent executing on said 
managed node. 
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6. (Currently amended) 
compri s ing ; 



The system of Claim 5 further 



at lcaat one managed product coupled to oaid security 
management agent wherein said at least one managed product 
forwards at lcaat one of oaid normalised evento to oaid 
□Gcurity management agent and receives normalized commands 
from said security management agent - 

7 . (Cancelled) 

8. (Cancelled) 

9. (Currently amended) A system comprising: 

an event subscription filter, said event subscription 
filter for receiving a plurality of normalized events 
€^ m t generated by one or more managed products , from a 
security management agent and for passing normalized 
events, for which said system is registered, to a feedback 
and control manager; and 

a feedback and control manager coupled to said event 
subscription filter, wherein said feedback and control 
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manager processes at least one normalized event received 
from said event subscription filter and issues at least 
one normalized command to at least one security management 
agent for passing to at least one of said one or more 
managed products for use in dynamically implementing a 
predefined security policy. 



10 



(Original) The system of Claim 9 further comprising: 
a knowledge database coupled to said feedback and 
control manager. 

11. (Original) The system of Claim 9 further comprising:" 
a directory coupled to said feedback and control 

manager * 

12. (Original) The system of Claim 11 further 
comprising : 

a configuration adapter connected between said 
feedback and control manager and said directory. 

13. (Original) The system of Claim 9 wherein said 
feedback and control system further comprises a rules engine 
coupled to said event subscription filter. 

14. (Original) The system of Claim 9 further comprising: 
a security management agent coupled to said event 

subscription filter. 

15. (Currently amended) The system of Claim 14 further 
comprising : 

at least one managed product coupled to said security 
management agent 
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16- (Currently amended) A method comprising: 

receiving a plurality of normalized events generated 
by rrom managed products by a network security feedback 
and control system from a security management agent ; and 
using information in said plurality of normalized 
I events by said network feedback and control system in 

dynamically implementing a predefined security policy by 
issuing at least one normalized command in response to a 
predefined event in said plurality of normalized events to 
a security management agent for passing to at least one 
managed product , 

17. (Currently amended) A computer-program product 
comprising a computer- readable medium containing computer 
program code for a method comprising: 

receiving a plurality of normalized events generated 
by g- rom managed products by a network security feedback 
and control system from a security management agent ; and 

using information in said plurality of normalized 
events by said network feedback and control system in 
dynamically implementing a predefined security policy by *. 
issuing at least one normalized command in response to a 
predefined event in said plurality of normalized events to 
a security management agent for passing to at least one 
managed product 

18. (Currently amended) A structure comprising: 
means for receiving a plurality of normalized events 

generated by from managed products by a network security 
feedback and control system from a security management 
agent; and 

means for using information in said plurality of 
normalized events by said network feedback and control 
system in dynamically implementing a predefined security 
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policy by issuing at least one normalized command in 
response to a predefined event in said plurality of 
normalized events to a security management agent for 
passing to at least one managed product . 



Claims 19-67. (Cancelled) 
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